Privacy, in plain English.

Donors. Your name (or the word “Anonymous” if you choose that), your email, the amount, and an optional public message. Email is the one thing we genuinely need — it is how your receipt reaches you, and a gift with no way to receipt it is a problem for you and for the team. You can also tell us your employer offers matching, which stores the employer's name so the team can chase the match.

Businesses that sponsor. Company name, and optionally a contact person, phone, email, website, logo, and the offer you want printed in the team's coupon book. You choose field by field which of those appear publicly — the toggles on the form are real, and a field you switch off is not rendered anywhere.

Players. The team — not us, and not the player — enters the roster: first and last name, jersey number, position, sometimes height, weight, squad, and a photo. Players do not have accounts and never sign in.

Team staff. An email address and a password, so coaches and organizers can sign in to manage their campaign.

This is the part people most want a straight answer on, so here it is as a table rather than a paragraph.

Sponsor contact fields flip to visible only if that business explicitly turns them on. A gift below the sponsor threshold stays off the sponsor wall entirely.

Plenty of platforms treat “anonymous” as a checkbox that hides your name from the page while keeping it on file. We don't. When you choose to give anonymously, the name you typed is never sent to our database — the record is created with the word “Anonymous” in the name field.

Your email is still stored, because your receipt has to reach you, and Stripe still has the payment record it is legally required to keep. But nobody browsing the team page, and no coach looking at their own dashboard, can recover the name. It isn't there.

Card details are collected by Stripe inside their own hosted fields and go straight to them. Our servers receive a payment reference and an amount — never a card number, never a CVC, never a full billing profile.

Money moves into the organization's own Stripe account. Fund Your Team never holds your donation and never takes anything out of it. Stripe handles the payment as its own data controller under its privacy policy.

We use Vercel Web Analytics, which is cookieless — it does not set a tracking cookie, does not build a profile of you, and does not follow you to other sites. That is why this site has no cookie consent banner: there is nothing to consent to.

It exists for one commercial reason worth being upfront about. The sponsor ladder sells visibility on a team page all season, and a business owner's first question is always “how many people saw it?” Without a number, that is unsellable.

The sponsor microsite counters go further: they are stored as daily totals only — how many times a page was seen, how many times someone tapped to reveal an offer. No IP addresses, no user agents, no visitor identity of any kind. It is deliberately built so it cannot be turned back into a person.

Four companies, each doing one job:

• Stripe — payments, receipts, and payouts to the team.
• Supabase — the database and sign-in for team staff.
• Vercel — hosting and the cookieless analytics above.
• Resend — transactional email, such as an account set-up link or an internal alert when a payment needs a human.

That is the complete list. We do not sell, rent, or trade personal information, and we do not send it to advertising networks or data brokers. If a law or a valid legal process ever required us to hand something over, we would comply, and we would tell the affected person unless we were forbidden to.

The people this platform raises money for are usually minors, so this section matters more here than on most sites.

We do not collect anything from children. Players do not create accounts, do not sign in, and are never asked for information. Everything shown about a player is entered by their team's own coaches or organizers, who are responsible for having the permission to share it.

Public pages show a first name and a last initial — never a full name. If you are a parent or guardian and want your child's photo, stats, or page removed, email us and we will remove it. We will not ask you to justify the request.

Ask us to correct or delete something and we will, with one honest exception: a completed donation is a financial record. The team needs it to account for its fundraiser, and Stripe keeps its own copy regardless of what we do. We can remove your name and message from public view; we cannot make the transaction disappear.

Rosters, photos, sponsor listings, and unfinished checkouts are all removable on request. Email info@surfstung.com and tell us what you want gone.

If what the product does changes, this page changes with it — that is a rule we hold ourselves to in the code, not just an intention. The effective date at the top moves when the substance moves. Material changes get a note on the site rather than a silent edit.

See also the Terms of Service.